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BACKGROUND OP THE INVENTION 

1. Field Of the Invention 

The present invention relates to table searching 
Lechiixquea and in pax LiuulaX Lo ci Ldble sc5cixuliln9 s^sLcjix and 
5 method £6r use in, for example, a database system or a switching 
system such as a p<acXeL awlLchlny bybLem or a x.uuLex. 

2. Description of the Related Art 

IndpcicKel. cuuuuuuiuaLluu ufc;Lwuj.K, lyyiccilly Lhe luLeriitiL, 
packet transmission from a source to a destination is performed 

10 by p<ic;}^et swiLcUtiS buch ci:^ ruuLery, each uf which forwards a 
received packet to a next hop node based on the destination 
address of the pacKeL. KeceiiLly, in addiLicu Lu Lhe packet: 
routing operation, the need may arise for a router to handle 
additional processing fux IPsec (IP Security)- IPbec is a 

15 security protocol working at layer 3 and is expected, to become 
the standard for virtual privaLeneLwciks (VPNs) uu Lhe Ixileruel: . 
Therefore, the need for a high-speed router is growing and 
several techniques have been yropusea, 

- The inventor has proposed an improved packet switch in 

20 Japanese Patent Application No, 11 -098140 filed on April 5 , 1999 
(unexamined Publication No> P2000-295274A published on October 
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20, 2000) . The proposed packet switch uses a tabic searching 
hardware device to allow a burden upon a microprocessor to be 
reduced, resulting in increased routing and IPsec processing 
speed. 

5 More specifically, the packet switch is provided with an 

IP flow table rcgiGtcring a routing rccult obtained by the 
routing process using the source and destination addresses of 
an IP packet as a search key. When receiving an IP packet, the 
IP flow table is searched using the iP source ana destination 
p 10 addresses of the received packet as a search key. When a hit 

S| is found in the IP flow table, the microprocessor performs a 

W 

m forwarding operation of the packet based on the found routing 

^1 result information without performing the routing process. 

Similarly, by performing IPsec processing with a security 
15 processor as hardware, the pacKet switching with security 
w processing can be performed at high speeds. 

f~ In routing and IPeec processing, recently, handling nav 

IP (Internet Protocol) traffic of encapsulated packets or 
Aggregated flow hae been required o£ a router. Aggregated flow 

20 includes a plurality of IP packets to be transferred to the same 
dectinaticn router. More specifically, these IP packets are 
aggregated by an encapsulating header wnose routing information 
ic determined baced on the IP destination and source addressee 
of the included packets. In this case, an IP traffic of original 

25 IP packets ic called Micro flow. 
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The propoocd packet awitch aa dc3crlbed above can achieve 
the simpiitiea aevice cent igurat ion ana tne nign- speed 
switching by performing the f orvarding processing of original 
packets (Micro flow] ana encapsulated packets (Aggregated flow j 
5 with the same hardware. 

In the cace where the proceccing procedure for aggregated 
IF traffic is changed due to, for example, invalidation of 
accurity asaociation, however, update of the table oearching 
hardware device cannot be completed rapidly . More speclticaiiy . 
10 since entries in the IP flow table are created in the order in 
wnicn IF traitic appeared, tne microprocessor searcnes tne if 
flow table for entries related to the aggregated IP traffic and. 
wnen a nit is tound, tne microprocessor can update tne found 
entry depending on a change of the aggregated IP traffic. 

15 Such a search process as dsscribad above is performed for 

all the entries in the IP flow table. Therefore, in the case 
of a large number of entries, the time required for the search 
IS not neqliqible. Further, durinq the search, the primary 
search operation for switching cannot be performed, 

20 Accordingly, the search speed of the packet switch is reduced 
and thereby /the packet switch throughput is also lowered. 

One method for solving such a problem may be considered 
yuch LhciL Lhe addreaa ox eiiLry fur each IP flow (mlciu flow) 
is directly stored in a database including a routing table. But 
2 5 11 ia auL pirferable, Iii yt^u^iial, IL li? not dt; Lexuiine J h<jw luairy 
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micro flows belong to a cingle aggregated flow. Therefore, it 
is difficult to estimate tne size of aatabase and therefore an 
vacancy may be generated in the ensured database area. 

The same problem may occur in not only a router but also 
5 any searching system. For example, consider that a searching 
eyetem having a dedicated search table in addition to a database 
IS aesignea to store data that has been searched for into the 
dedicated search table, In such a searching system, when the 
search is started, the dedicated search talDle is first searched 
O 10 and, if no hit is found in the dedicated cearch table, then the 

^-J database is searched. In order to ensure high-speed searching, 

nj the capacity of the dedicated search table chould be limited. 

S Accordingly, if there is data with low use frequency or data 

fit 

^- after the expiration of a preset time interval, then the data 

ib should be deleted from the dedicated search table in the order 

n a 

Q o£ registration. 

o 

Especially, in the case where a plurality of pieces of 
data are associated with each olhex, it its nut eaay Lu be 
consistent with the database. When a chain of pieces of data 
20 is deleted from the database, the related data should be deleted 
from the dedicated search table. At this time, it is necessary 
to search the dedicated search table for all related data. 
Therefore, high-speed searching and updating operation cannot 
be achieved. 
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SUMMARY OF THE INVENTION 

An object of the present invention is to provide a 
searching system and method allowing high-speed data searching 
an(^ updating operation. 
5 Another object of the present invention is to provide a 

packet switching mf^thor] and systftm allowing hi gh - .qpftp.d par.lce=>r. 
routing operation. 

According to the present invention, a data searching 
system Includes; a database for storing a plurality of pieces 

10 of data; a search table for stori.ng at least one piece of data 
which has been selected by the database; and an address pointer 
table for storing location i.nf oT-mat i ori i.ndi citing an entry 
address ol each piece of data stored in the search table and/ojr 
relationship information among entry addresses of pieces o-F data 

15 sLored in the search table. 

The address pointer table may include a plurality of memory 
blocks each having a lixed length on a recording medium, wherein 
the memory blocks are located at consecutive addresses, wherein 
each of Lhe memory blocks comprises; a first area lor storing 

20 an entry address indicating a location of a corresponding piece 
uf data tiLured in the search table; and a second area lor storing 
one of a next block address and a bottom- indicating flag, the 
aexL block address Indicating an address oI a memory block 
storing data following the corresponding piece of data, and the 



i'4 
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bottom indicating flag indicating that a current memory block 
is a bottom ot a list. 

The data searching system may further include a controller 
controlling such that the search table Is searched tor a desired 
5 piece of data before the database and, if a hit is found in the 
search table, then a found piece of data is used as a search 
result, and if no hit is found in the search table, then the 
datahrj?;ft i fii^.arrhftd for the desired plp.cft of data and a fnnnd 
piece of data is used as a search result and is registered into 
10 the -search table, wh**rft-in a piftcft nf data with low r^tri ftv^^.d 
frequency is deleted from the search table according to a 
predetermined condition and all linlcRd mpmnry hlnrVs rRlatp.d 
to the deleted piece of data are released into available memory 
blocV..'? . 

15 According to another aspect of the present invention, a 

packet processing system inclndp./;: a niicroprocRSsor ; a r on ting 
^^^^,5- a searcher- having a search memory connected thereto, 
vherein the. search memory stnre<5 a .QAarch tahlA which i <=i n<5Ad 
to increase in search speed for packet forwarding; and an address 

20 pointer table for storing location inforTnation indicating an 
entry address of each piece of data stored in the search table 
and/or relationship information among entry addresses of pieces 
o£ data stored in the search table. The address pointer table 
may be provided in a main memory of the microprocessor ot in 

25 the search memory. 

Tho addr'^ss pointer table may include a plurality of memory 
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blocks each having a fixed length on a recording medium, wherein 
the memory Olocxs are located at consecutive addresses, wherein 
each of the memory blocks comprises: a first area for storing 
an entry address indicating a location of a corresponding piece 
5 of data stored in the search table; and a second area for storing 
one of a next block address and a bottom- indicating flag, the 
next block address indicating an address of a memory block 
.qtnring dntri following the r.orrftspnndl ng pi p.cp. of data, and thA 
bottom- indicating flag indicating that a current memory block 
10 i s a bottom of a 1 i . 

In the packet processing system as described above, when 
the routing table bas been npdatRd, the ar^dres-s pointer- table 
=£ is accessed based on contents of an entry to be changed to obtain 

nj location information of the entry tn be changer! and entri e.<^ 



y, 15 related to the entry to be changed in the search memory, and 

the entry and related entries are changed so as to be consi.stent 
with the routing table. 

According to still anotheT aspect of the present inventi on , 
a system includes: a first memory for retrievably storing a 
20 plurality of entries; a second memory for storing a copy of an 
entry that has been retrieved from the first memory to 
retrievably store a plurality of retrieved entries; a third 
memory lor storing a list of retrieved entries which are linKed 
from a leading one to a bottom one: and a data controller for 
25 cLCCessing a desired retrieved entry by relerring to the list 
stored in the third memory. 
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The data controller may proccaa the desired retrieved 
entry so as to be consistent witti a corresponding entry stored 
in the first memory when the corresponding entry has been 
processed. 

5 According to further another aspect of the present 

invention, a packet switching system includes: a routing table 
for retrievably storing a plurality of routing entries; a flow 
tahlft far stnring a cnpy of a routing p.ntry inrii rating a par^cftt 
flow that has been retrieved from the routing table to 

10 rfttri ftv^ihly stnrA plurality of rAtri*avA<i park^t flnw<;; an 
address pointer table for storing a list of retrieved packet 
flows whicH are 1 i nk-ftfl from a l#»ariing nnp. to a hottrim ohr; a 
search processor for accessing a desired retrieved packet flow 
■in the flow tahlp. by rp.fp.rring to thp 1 i c;r c:torp.fl in thp. aHrirpc;?^ 

15 pointer table; and a microprocessor performing a packet routing 
control . 

When a routing entry has been designated to be processed 
according to predetermi ned rnnting proce-ssi ng, thfi .qp^^rrh 
processor may process a corresponding retrieved packet flow in 

20 the flow table so as to be r.on5;i ?^tp.nt wi th the de.s.lgn^*ted routing 
entry stored in the routing table. 

Each of the roi.iting p.ntrie.'^ stored in the routing table 
may have a first indicator and a second indicator, the first 
indicator indicating which one of a single packet flow anri an 

25 aggregated packet flow the routing entry relates to, wherein 
th<a aggregated packet flow comprises a plurality of single packet 
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flows linked, and the second indicator indicating a leading 
nddrftss of t-.hft list, in the rtddress pointer tahlR. 

The list of retrieved packet flows may include a plurality 
nf TTiAmnry hi ork-s Arirh nnrrfispnndi ng rn rhft rp-.tri ev^n prtr.kp.f f 1 owf: , 
5 each of the memory blocks comprising an address of a 

corresponding retrieved packet flow in the flow table and a next 
pointer indicating one of an address of a next memory block 
following the memory block and an address of the memory block 
ilseir. 

10 When an aggregated routing entry stored in the routing 

Lable is deslyuaLed, Lhe search process uriuay access the addxtiss 
pointer table depending on the second indicator of the aggregated 
ryuliiiy eiiLr;^ Lu Lxace lhe llsL of biuyle packeL fluws lelaLtid 
to the aggregated routing entry so as to access the single packet 

15 flows related Lu Lhe ayyreyaLed xouLiay eiiLry. 

The search processor may process the single packet flows 
related Lu Lhe ayyreyaLed ruuLiiiy euLiy so as Lo be cuusisLeiiL 
with the routing table when the routing table has been updated. 
A packeL swlLchluy lueLhud includes Lhe sLeps of: a) 

20 retrievably storing a plurality of routing entries in a routing 
table; b) sLuriny a copy uf a ruuLiuy eiiLry iadicaLiiiy a packeL 
flow that has been retrieved from the routing table to 
reLrlevably sLoxe a plurallLy uf reLixevea pacXeL flows lu a 
flow table; c) storing a list of retrieved packet flows which 

2 5 are linked from a leadiuy one Lu abuLLuni uae lu an address poluLex 
table; and d) accessing a desired retrieved packet flow in the 
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flow table by referring to the list stored in the address pointer 
table. 

The step (d) may include the steps of; when a packet flow 
rnrrfti=:ponfiing tn a rp.rfti vftd parkftr. fai 1 f.n hfi f onnd i n thrt ^^p^Avch 
5 table, searching the routing table for the packet flow; 

registering the found packet flow as a routing result into the 
search table; determining whether the found packet flow is a 
micro flow belongino to an aggregated flow; when the found packet 
now is the micro flow, searching the search table for a bo L Lorn 

10 retrieved packet flow of the list corresponding to the aggregated 
fluw; adainy Lhe found packet flow Lo Lhe bo LLuiii x«LLitived packet 
flow stored in the search table; and when the found packet flow 
lb nut the lulcxc flow, storing an address uf thti fuunJ packet 
flow in the search table into a corresponding routing entry in 

15 thti routing Lable. 

The step (d) may include the steps of: when an aggregated 
iuuLiiiy entry has been Ueslyudted to be deleted, deletiuy each 
of the retrieved packet flows included in a list related to the 
ayyreyated ruutlay entry from the address pointer table until 

20 finding a bottom retrieved packet flow of the list; releasing 
a chain of the retrieved packet flows formed in the addreas 
pointer table to make them available ; deleting a retrieved packet 
flow curxesycndiay to the ayyreyattsd routiny entry fruiii the fluw 
table; and deleting the aggregated routing entry from the routing 

25 table. 
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RRTRP nKSr.RTPTTON OF THF DRAWINGS 

Fig. 1 i disgrp^m showing a packet switching system 
according to am embodiment of the present invention ; 

Fig, 2 is a diagram showing an example of an IP flow table 
5 in the embodiment ; 

Fig. 3 is a diagram showing a relationship among routing 
Liable, IP flow Lable, ciiid ^addreaa puiiiLer table fur expiaiaiiiy 
an operation of the embodiment ; 

Fig. 4 is a flow chart showing a data search operation 
10 u£ the eJubuUimenL; 

Fig. 5 ib a flow chai L ^jUowiiiy a data regiat ration 
operation of the embodiment; and 

Fig. 6 is a flow chart showing a data deletion operation 
of the embodimeuL. 



15 DESCRIPTION OF THE PREFERRED EMBODIMENT 



Hereinafter, taking a packet switching system as an 
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example, a preferred embodiment of the present invention will 
be described. 

As shown in Fig* 1, a packet switching system according 
to an emnodimAnt of the prftSftnr invftnrinn is prnvin*=»n with 
5 microprocessor 11 and a main memory 12 connected to the 

m-i nroprnrftssor 1 1 by a ^rnaf^.s^ar bus 13, through which a packet 
processor 14 connected to a packet memory 15, a searcher 16, 
and a search memory 17 including an IP flow table 17a are 
connected to each other. The pacXet processor 14 Is coanecLed 
10 to a security processor 19 and lower-lay^r processors 20 through 
J^' a switch labric 18, The switch labric 13 is cuuiiecLed Lo ueLwurk 

yj interfaces (not shown) through the respective lower-layer 

processors 20. 

The. main memory 12 stores a routing table 12a and an address 
15 pointer table APT. Tlae microprocessor 11 perrorins Lhe eaLlre 
control of the packet switching system and further performs 
packet processing such as packeL ueAL-hop deLeniiiiialluiis 
according to the predetermined routing algorithm and protocol 
and update ol the routing table 12a dependluy ou Lhe rouLluy 
20 results. The main memory 12 further stores control programs 
Including Lhe packet processing program lu run ou Lhe 
microprocessor 11. 

The ruuLliiy Lcible 12d is a daLabase bLorliiy ouLpuL port 
numbers and next -hop layer 2 addresses which are retrievable 
25 uslny d ueLwurk prefix uf au IP des Liiia Lluu dddiess iucladed 
in a received packet as a search key. The routing table 12a is 
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created and updated by the microprocessor 11 performing the 
routing processing. More specifically, the routing process is 
performed such that the routing table 12a is created on the main 
memory 12 by learning the network topology of a nfttwork connactt^d 
5 to the packet switching system and computing metric and the 
roTiting table 12a Is updated at rp.gnlar interval.? according to 
a specific routing protocol. 

Thp. afirirp.c;s pointp.r table APT stores information 
representing relationships between entries of the routing table 
10 12a and entries of the IP flow table 17a- . The details of the 
address pointer table APT will be described later. 

The packet processor 14 is a forwarding controller or a 
search controller, which performs IP header processing and 
forwarding of a received packet to a destination network 
15 interlace 20 by starting up the searcher 16 to obtain a search 
result from the searcher 16. 

The searcher 16, when started by the packet processor 14, 
searches the IP flow table 17a according to a search key composed 
ol the IP source and destination addresses of a received packet . 
20 The search result is sent back to the packet processor 14. 

The IP flow table 17a registers routing results obtained 
by the microprocessor 11 performing the routing process for each 
IP now entry- The registered entries are luauaged by the 
software running on the microprocessor 11. The details will be 
25 described herelnalter. 

As shown, in Pig. 2, the IP flow table 17a can store a 
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predetermined number of IP flow entries in the order in which 
the IP flows appeared. Each IP flow entry is composed of a searnh 
key and a routing result, and as necessary may include security 
information. The search key is composed of IP source addrftfis 
5 and IP destination address. The routing result is composed of 
MAC source address, MAC destination address, and otitpnfpnrt 
number. Security information is composed of encryption 
algnrithm, pnnryptinn kp^y , np.w TP source ^iddress, and new IP 
destination address . 

10 In the above-described configuration, when receiving a 

packet at a network interlace, the packet is subject to layer-2 
processing and is stored in the packet memory 15. the IP header 
ol the packet stored in the packet memory 15 is analyzed by the 
packet processor 14 under control of the microprocessor 11. If 

15 it is determinea that the packet has been normally received, 
then the IP header is transferred to the searcher 16. 

Wliea receiving the IP header, the searcher 16 extracts 
necessary data (here, IP destination address and IP source 
address) from the IP header and assembles a search key Irom the 

20 extracted data. The searcher 16 searches the IP flow table 17a 
according to the search key (here, composed of the IP defitlnation 
address and IP source address) . As shown in Fig. 2. the searcher 
16 searches the search key Tieid ol the IP flow Lable 17a lor 
a combination of the IP destination address and IP source address 

25 of the received packet. 

When a hit is found in the IP flow table 17a, the routing 
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reault and security information corresponding to the hit search 
key are read from the IP flow table 17a. More specif i nsl ly, the 
output port number, next -hop layer-2 address, encapsulating 
hftadftr and the like corrflsponding to thft h.1 1 sft;5rr.h k^y fiVPi rp.fld 
5 out and sent back to the packet processor 14. When receiving 
the found routing res^nlt and sftonri ty information from fhe 
searcher 16, the packet processor 14 performs header updating 
based on these data and, if necessary, may start the searcher 
16 searching the IP flow table 17a lor the encapsulated IP header . 

10 After the above- described IP header processing has been 

completed, the packet processor 14 reads ouL Lhe correspoudiny 
packet data from the packet memory 15 to transfer the packet 
to a destination network interlace through a corresponding 
lower-layer processor 20 in which the packet is subject to 

15 layer-2 and layer -1 processing. 

It should be noted that the packet switching system as 
described above may perlorin security processiacj suuh as data 
encryption/decryption processing in units of a packet in 
addlLlon Lo the routing processing. The deLalls of Lht; securlLy 

20 processing have been disclosed in the Japanese Patent 
Applicatloa No. 11-098140 (Unexdn^ined PublicaLioii Nu. 
P2000-295274A) . 

Referx'iiiy Lu Fig. 3, the rOuLiug table 12a y Lures a 
plurality of routing entries, each of which has two pointers 

25 at Lhe Lail end Lhereuf : PTRl aad PTR2 . In Lhe case whei.e a 
routing entry itself is an aggregated IP flow, the pointer PTRl 
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indicates the address at which the aggregated IP flow 
corrp.spoTiding to the routing entry is .stored in the TP flow tablp 
17a and the pointer PTR2 indicates the leading address of a linked 
li.qt of mirro flows hftlonging to thft ;iggrp.gatftd TP flow in thft 
S address pointer table APT. In the case where the routing entry 
itself is a micro flow, NUIJ, is written into both the pointeT? 

PTRl and PTR2 , 

The address, pointer table APT is composed of a plurality 
of lixed-size memory blocks (e.g. 4 bytes) and stores link 

10 information representing a linked list of micro flows. Each of 
Llie uitimory blocks has a store address and a ucaL pointer. The 
store address indicates the address at which a corresponding 
iuluxu flow is sLored in the IP flow table 17a. The next pointer 
indicates the address of a next memory block when a next entry 

15 tJAiaLs <nid, 11 no next entry exists, then the address of Its 
own . 

IL Itp assumed as shown la Fig. 3 LhaL the pointer PTRl 
of the routing entry 1 indicates the address of an aggregated 
flow (IP flow 1) and Lhe pointer PTR2 Indicates the leading 

20 address of a linked list of four micro flows (IP flows 2-5) as 
iadicaLed by AD1-AD4 in Lhe address polnLei; table APT. In the 
first memory block ADl, the store address indicates the first 
micro flow (IP flow 2) and Lhe nexL pulnLer IndlcaLes Lhe addicSS 
of the second memory block AD2 . In the second memory block AD2 , 

2 5 the store address IndicaLes Lhe second micro flow (I? How 3) 
"and the next pointer indicates the address of the third memory 
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block AD3. It ±3 the some with the third memory block ADD. In 
the fourth memory block. AD4. the store address: indinatp.s the 
fourth micro flow (IP flow 5) and the next pointer indicates 
the address of Its own because thA TP flow .S ir thft bnttnm of 
5 the linked list. 

The linVftd-list strnntiirft is managed by the 
microprocessor 11 . When a micro flow belonging to the aggregate 
flow is detected . the microprocessor 11 looks at the. pointers 
PTRl and PTR2 to follow a chain ol micro flows from IP flow 2 

10 to IP flow 5 in the IP flow table 17a while referring to th^ 
address pointer table APT from the first memory block ADl Lu 
the fourth memory block AD4. And the microprocessor 11 stores 
the new micro flow into an address lollowing the boLLom of Llie 
list in the IP flow table 17a and further stores new link 

15 information into the next memory block AD5 lollowing the fourlh 
memory block AD4 . Accordingly, in th^ fourth memory block AD4, 
the next poinLer indicates the address o£ Lhe £11 Lh lueiuory block 
AD5. In the fifth memory block ADS, the store address indicates 
the filth micro flow (IP flow 6) and the next poiiiLex IndicaLtis 

20 the address of its own because the IP flow 6 is the bottom of 
the linked list. In this manner, the entries are sequeuLially 
registered in the IP flow tabl» 17a in the order in which the 
packeLii arrived depcudiay Oa traffic characLeris Lies . Since 
each entry is added to the IP flow table 17a in the arrival order, 

25 the regis texfcid eatj-les in the IP flow table 17a are not la orderly 
sequence . 
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On the other hand, in the case where the contents of the 
routing table 12a is changed due to dynamic: ronting opftratinn, 
it is necessary to update the corresponding entries of the IP 
flow table 17a so as to be consiKtent with thA npdat.A routing 
5 table 12a. If the IP flow table 17a were not updated, then the 
optimal routing cannot bp. ar-hievftd or some packets may be 
discarded on the following link. Therefore, when the routing 
table I2a has been uprlated, the microprocessor 11 determines 
where relevant entries linked in a chain are stored in the IP 

10 flow table 17a by referring to the address pointer table APT 
as described above. When such a linked list ol eiiLries have been 
found, the microprocessor 11 update them so as to be consistent 
with the routing table 12a, 

As described above, the microprocessor 11 is allowed to 

15 directly access each ol linked entries scattered Lhroughout the 
IP flow table 17a by following a chain of address pointers in 
the address pointer table APT without any searchlag opoxaLlOii. 
Accordingly, it is very easy to change and delete an entry of 
the IP flow table 17a, resulting in high-speed searchlug and 

2 0 updating. 

DATA ggft^^CH 

When a packet is received at a network interface, the 
packet pLucesaui. 14 starts up the Seai.L;hei. 16. When j-ecelvliiy 
the IP header from the packet processor 14, the searcher 16 
2 5 extractii search key data (here, IP destluatluu address and IP 
source address) from the IP header (step SlOl) and searches the 
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IP flow tabic 17a according to the search key (atcp S102) , When 

a nit is found in the iir* flow table l/a (it:^ at step siui), 
necessary information including the corresponding output port 
number are read out (step t?iU4) and sent oacic to tne packet 
5 processor 14 or the microprocessor 11 (step S105) . When no hit 
is found in the IP flow table i7a (NO at step si03), control 
goes to a data registration routine - 
DATA REGISTRATION 

Referring to Fig. 5, when the data registration procedure 
10 starts, thft TP header information is transferreri to the 

microprocessor 11 (step SlOG) and the routing processing is 
lij p«rfnrm(=irt (Rfp.p SI (17). Mnrp. spftrl f 1 r.al 1 y . the. TP hp.flriftr 1s 

analyzed to form a search key and the routing table 12a is 
.qp.arrh*:*^ /^nnortiing to the search key. ThA routing result is 
15 registered in the IP flow table 17a (step 3100). 

Thp.rftaftftr, 1t 1s determined whethe.r the rp.ce1.ved par.ket 
is a micro flow (step S109) . If it is a micro flow (YES at step 
?;in9), thA microprocessor 11 reads the po.lnter PTR2 of the 
relevant routing entry from the routing table 12a (step 3110) 
^0 p\rir\ acr.p.ssfts thp. leading address of a linlced list in thft address 
pointer table APT and traces linked memory blocks to find the 
bottom of thp. list (stp.p ?;m ) . Thftn, thA micro flow addrA.qs 
on the IP flow table is added to the bottom of the list (step 
S112) and thp data rpgistratlnn pror.fsidnrp is te.rmin^^tp.d . 
2 5 If it is determined that the received packet is not a micro 

flow (NO at stpp ?!in9), thp. micro flow addrp.p:s on thP. TP flow 
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table is written into the pointer TTRl of the relevant routing 
entry in the routing table 12a (step S113). 

The data registration on the IP flow table 17a Is performed 
as defscribed above. Accordingly, when a packet having thft samft 
5 IP header information, the routing processing is performed by 
searching only the IP flow tahlft, allowing high-<;pee-d pacVet 
routing or forwarding. 



10 frequency or data after the expiration of a preset time Interval , 
th©n the data is deleted from the IP flow table 17a and the routing 
table 12a as described hereinafter, 

Rtif fcii-xiiiy Lo Fly. 6, dlLer reaQliiy uuL Lhe puliiLer PTR2 
of a designated routing entry to be" deleted from the routing 

15 Lable 12a (step S201), Lhe store address stored la the iut;iiiOj.y 
block indicated by the read pointer PTR2 is read out from the 
address pointer table APT (step S202). Then, Lhe entry at the 
read store address (here, a micro flow) is deleted from the IP 
flow table 17a (atep S203). Thereafter, 1 1 lb de teiiiilued 

20 whether the current memory block is the bottom of the list (step 
S204) . Wlien it la not Lhe butLum uf the list (NO at y tep S204) , 
the next memory block on the list is accessed (step S205) and 
the steps S202-203 are repeatedly perfoLiiied while prut;eedliiy 
to next memory block until reaching the bottom of the list. 

7^ When it i «=; tietermined that, the cnrr^nt memory hlor.k i >; 



As described before, if ther© is data with low us© 
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the bottom of the list (YEG at step G204) , the chain of relevant 
list 155 relftaRftd on the address pointer table (step ^nd 
the pointer PTRl of the relevant entry is read from the routing 
tab! A (stAp <^201) . Then, tbp. entry at the addrASS indioated 
5 by the read pointer PTRl (here, an aggregate flow) is deleted 
from the IP flow table 17a (step S^08), Further, the relevant 
routing entry is deleted from the routing table 12a (step S209) . 

In this way, all the related pieces of data can be 
efficiently deleted from each of the routing table 12a, the IP 

n 

^ 10 flow tabic 17a, and the address pointer table AFT. 



Ac described above, the addrecc pointer table provides 
relationships between entries of the routing table and entries 
of the IP flow table. By referring to the address pointer table, 
the microprocessor can directly find llnXed IP flows from the 
15 IP flow tabic without searching the IP flow table. Therefore, 
the table management for encapsulated IP pacxet flows can be 
simplified and the time required for packet routing and 
forwarding processing can be dramatically reduced, resulting 
in improved throughput of the packet switch. 

20 Further, the addrdss pointer table is used to provide 

relationships between entries different in structure and 
attribute of a search key, allowing simplified system 
conf iquratlon of a packet switch requiring aggregate processiay 
of IP flows such as IPsec and Diff serve. 
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The present invention is also applicable to any searching 
Ry5;t:Rm hr^vi ng a searrh table in addition to a dat;^base, wherein 
the searching table is designed to store data that has been 
rfttriftvftd from thA databasA. Morft spftri f i ral ly , an addre.ss 
5 pointer table is provided, which can provide relationships 
between entries of the database and entries of the search table. 
By reJTerring to the address pointer table . the search processor 
can directly find linked pieces of data from the search table 
wlLhouL sedi:chln9 the search table (see Fiy 4) - FurLher, if no 

10 hit is found in the search table, the data registration is 

perfoLiued as yhowii In Fig. 5- FurLiiexmure, in the caae where 
any data of the search table should be deleted under condition 
of expxraLluii or the like, Lhe data deleLiuu lb pexf oxmed ab 
shown in Fig. 6. Therefore, in the case where a plurality of 

15 piecey uf da La is linked Lo form d llsl, all Lhe dciLa of the 



O list can be retrieved, registered, and deleted rapidly. 



